summaryrefslogtreecommitdiffstats
path: root/net/netfilter
Commit message (Expand)AuthorAgeFilesLines
* netfilter: nft_queue: add _SREG_QNUM attr to select the queue numberLiping Zhang2016-09-231-12/+90
* netfilter: nf_tables: validate maximum value of u32 netlink attributesLaura Garcia Liebana2016-09-236-8/+59
* netfilter: nft_numgen: add number generation offsetLaura Garcia Liebana2016-09-221-6/+26
* netfilter: nft_hash: fix hash overflow validationLaura Garcia Liebana2016-09-131-1/+1
* netfilter: nft_numgen: fix race between num generate and store itLiping Zhang2016-09-121-1/+1
* netfilter: conntrack: remove packet hotpath statsFlorian Westphal2016-09-123-21/+7Star
* netfilter: Add the missed return value check of nft_register_chain_typeGao Feng2016-09-122-2/+8
* netfilter: Add the missed return value check of register_netdevice_notifierGao Feng2016-09-123-7/+28
* netfilter: nf_conntrack: simplify __nf_ct_try_assign_helper() return logicPablo Neira2016-09-121-9/+6Star
* netfilter: introduce nft_set_pktinfo_{ipv4, ipv6}_validate()Pablo Neira Ayuso2016-09-121-77/+2Star
* netfilter: nf_tables: ensure proper initialization of nft_pktinfo fieldsPablo Neira Ayuso2016-09-122-1/+5
* netfilter: nft_dynset: allow to invert match criteriaPablo Neira Ayuso2016-09-121-1/+19
* netfilter: nft_hash: Add hash offset valueLaura Garcia Liebana2016-09-121-4/+13
* netfilter: nft_queue: check the validation of queues_total and queuenumLiping Zhang2016-09-091-0/+11
* netfilter: nf_ct_sip: allow tab character in SIP headersMarco Angaroni2016-09-071-1/+1
* netfilter: nft_quota: introduce nft_overquota()Pablo Neira Ayuso2016-09-071-4/+4
* netfilter: nft_quota: fix overquota logicPablo Neira Ayuso2016-09-071-1/+1
* netfilter: nft_numgen: rename until attribute by modulusLaura Garcia Liebana2016-09-071-15/+15
* netfilter: ftp: Remove the useless codeGao Feng2016-09-071-12/+1Star
* netfilter: ftp: Remove the useless dlen==0 condition check in find_patternGao Feng2016-09-071-2/+0Star
* netfilter: nf_ct_sip: correct allowed characters in Call-ID SIP headerMarco Angaroni2016-09-071-2/+3
* netfilter: nf_ct_sip: correct parsing of continuation lines in SIP headersMarco Angaroni2016-09-071-2/+1Star
* netfilter: gre: Use consistent GRE and PTTP header structure instead of the o...Gao Feng2016-09-071-6/+6
* netfilter: gre: Use consistent GRE_* macros instead of ones defined by netfil...Gao Feng2016-09-071-2/+2
* Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-nextDavid S. Miller2016-09-0626-923/+1186
|\
| * netfilter: log: Check param to avoid overflow in nf_log_setGao Feng2016-08-301-3/+5
| * netfilter: remove __nf_ct_kill_acct helperFlorian Westphal2016-08-301-7/+5Star
| * netfilter: conntrack: resched gc again if eviction rate is highFlorian Westphal2016-08-301-0/+6
| * netfilter: conntrack: add gc worker to remove timed-out entriesFlorian Westphal2016-08-301-0/+76
| * netfilter: evict stale entries on netlink dumpsFlorian Westphal2016-08-301-1/+24
| * netfilter: conntrack: get rid of conntrack timerFlorian Westphal2016-08-304-58/+56Star
| * netfilter: don't rely on DYING bit to detect when destroy event was sentFlorian Westphal2016-08-301-8/+14
| * netfilter: restart search if moved to other chainFlorian Westphal2016-08-301-0/+7
| * netfilter: nf_tables: Use nla_put_be32() to dump immediate parametersPablo Neira Ayuso2016-08-262-5/+5
| * netfilter: nf_tables: honor NLM_F_EXCL flag in set element insertionPablo Neira Ayuso2016-08-263-13/+36
| * netfilter: nf_tables: reject hook configuration updates on existing chainsPablo Neira Ayuso2016-08-231-0/+31
| * netfilter: nf_tables: introduce nft_chain_parse_hook()Pablo Neira Ayuso2016-08-231-63/+89
| * netfilter: nft_hash: fix non static symbol warningWei Yongjun2016-08-221-1/+1
| * netfilter: fix spelling mistake: "delimitter" -> "delimiter"Colin Ian King2016-08-221-1/+1
| * netfilter: nf_tables: add number generator expressionLaura Garcia Liebana2016-08-223-0/+199
| * netfilter: nf_tables: add quota expressionPablo Neira Ayuso2016-08-223-0/+128
| * netfilter: nf_conntrack: restore nf_conntrack_htable_size as exported symbolPablo Neira Ayuso2016-08-181-0/+2
| * netfilter: conntrack: simplify the code by using nf_conntrack_get_htLiping Zhang2016-08-181-36/+10Star
| * netfilter: remove ip_conntrack* sysctl compat codePablo Neira Ayuso2016-08-136-378/+6Star
| * netfilter: nf_tables: add hash expressionLaura Garcia Liebana2016-08-123-0/+143
| * netfilter: nf_tables: rename set implementationsPablo Neira Ayuso2016-08-124-4/+4
| * ipvs: use nf_ct_kill helperFlorian Westphal2016-08-121-5/+2Star
| * netfilter: use_nf_conn_expires helper in more placesFlorian Westphal2016-08-123-9/+3Star
| * netfilter: physdev: add missed blankHangbin Liu2016-08-121-2/+2
| * netfilter: conntrack: Only need first 4 bytes to get l4proto portsGao Feng2016-08-125-8/+10